Lucene search

K

7 matches found

CVE
CVE
added 2020/01/11 3:15 a.m.131 views

CVE-2019-20378

ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.

6.1CVSS5.8AI score0.0017EPSS
CVE
CVE
added 2020/01/11 3:15 a.m.125 views

CVE-2019-20379

ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter.

6.1CVSS5.9AI score0.00354EPSS
CVE
CVE
added 2012/08/06 6:55 p.m.57 views

CVE-2012-3448

Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors.

7.5CVSS7.4AI score0.19383EPSS
CVE
CVE
added 2017/08/09 6:29 p.m.46 views

CVE-2015-6816

ganglia-web before 3.7.1 allows remote attackers to bypass authentication.

9.8CVSS9.2AI score0.0211EPSS
CVE
CVE
added 2024/11/19 9:15 p.m.46 views

CVE-2024-52762

A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "tz" parameter.

5.4CVSS5.6AI score0.00262EPSS
CVE
CVE
added 2024/11/19 9:15 p.m.46 views

CVE-2024-52763

A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web v3.73 to v3.75 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "g" parameter.

5.4CVSS5.6AI score0.00262EPSS
CVE
CVE
added 2013/03/14 3:12 a.m.39 views

CVE-2013-0275

Multiple cross-site scripting (XSS) vulnerabilities in Ganglia Web before 3.5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.8AI score0.00295EPSS